$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: FsGHnlLbkh/tieoXRoT0GNm+R6piekVZxB9go8ErJVw= Subject key identifier: 8E:09:33:1D:A3:C7:B0:88:DA:EF:4E:FF:0E:80:3B:E0:21:FB:A8:55 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 0205 Signing time: Mon 03 Nov 2025 02:26:10 +0000 Manifest this update: Mon 03 Nov 2025 02:26:09 +0000 Manifest next update: Mon 10 Nov 2025 02:26:09 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: +VDn17ljOvLNECKg0rg17ff7Ka5DpC1xMZmXMSAsnsQ=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: Nov 3 02:26:09 2025 GMT Not After : Nov 10 02:26:09 2025 GMT Subject: CN=690812c2-4fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:85:c1:06:87:b3:d3:d4:34:af:36:4f:4e: cf:4b:18:56:90:b8:54:72:b0:bf:16:f6:fa:02:2a: 56:a7:e8:91:37:2f:32:e4:46:00:2e:e6:a6:01:92: 5c:99:42:be:78:28:0b:fa:e4:ff:d9:44:c8:3c:27: 12:a2:76:5a:67:12:b6:64:77:ca:b8:72:de:0f:65: ad:c3:e8:21:76:51:30:90:a9:2d:83:fc:3c:ab:99: 66:a7:8b:e0:55:10:34:22:9a:e0:da:e3:5e:19:77: 86:f9:e8:83:a3:d0:a6:14:40:8a:dc:df:10:59:b4: 09:cc:25:2f:50:7d:46:03:19:cf:a4:83:08:97:f0: b8:e5:4c:70:0a:e7:b8:78:4f:5d:af:87:b4:ea:b2: 3b:73:d0:83:67:37:14:37:57:ca:f8:9b:2b:e5:bb: 8f:45:3a:fe:73:e4:76:97:00:77:7e:ad:ca:dd:e1: fd:35:5a:1b:c4:d4:54:73:9c:bf:cd:d8:63:97:e9: 6d:0f:20:00:76:eb:04:38:67:c2:e8:d8:19:d2:2d: 4b:45:86:d1:a1:90:fd:92:f1:19:cb:4a:99:c6:82: 1e:3b:4b:3b:36:12:88:d1:e1:09:84:99:09:1d:68: 96:89:9a:fa:5d:f6:a0:2a:f1:6c:11:3d:59:5a:d2: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:33:1D:A3:C7:B0:88:DA:EF:4E:FF:0E:80:3B:E0:21:FB:A8:55 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:56:66:3e:25:06:26:4e:fc:7c:ec:e8:b7:d1:44:2c:15:bb: 54:d8:3f:b8:d2:5e:89:86:b7:b1:67:4a:5c:f1:5f:45:03:e5: 3d:70:57:55:fd:36:ac:3f:7f:85:03:da:25:d9:86:05:f1:bd: 32:89:5b:75:54:50:62:e7:62:24:d6:22:71:d3:c9:2d:32:5c: eb:b0:60:75:40:8a:d6:45:1d:3a:a6:76:ff:62:2d:ef:8d:c8: 63:48:2c:eb:dd:90:83:22:2a:e4:4a:8c:04:fa:21:dd:51:7a: 7c:84:36:22:e1:59:e1:a8:f6:0c:3f:41:43:ed:f5:57:04:08: 09:5b:77:08:93:e9:30:e5:51:de:e4:eb:7a:2e:59:33:f2:68: dd:38:29:ae:5a:5b:31:23:03:41:c4:f4:1e:b7:ab:52:38:25: 83:3b:89:24:6a:bf:e0:35:55:86:43:e9:9d:0b:0b:7c:96:b1: dc:7c:9e:53:85:9a:9d:31:71:20:49:ca:e4:a4:2b:0c:6d:2e: a3:88:bf:d2:6c:25:1f:0f:af:3a:e0:24:79:8b:f2:8e:1b:f3: bb:bc:fb:95:ad:f9:6c:35:30:34:d9:94:69:52:e0:f8:30:df: 14:16:1f:19:14:a4:1e:1e:53:fc:df:14:04:1a:9a:74:e0:92: a7:86:6d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjUxMTAzMDIyNjA5WhcNMjUxMTEwMDIyNjA5WjAYMRYwFAYD VQQDEw02OTA4MTJjMi00ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphyFwQaHs9PUNK82T07PSxhWkLhUcrC/Fvb6AipWp+iRNy8y5EYALuamAZJc mUK+eCgL+uT/2UTIPCcSonZaZxK2ZHfKuHLeD2Wtw+ghdlEwkKktg/w8q5lmp4vg VRA0Iprg2uNeGXeG+eiDo9CmFECK3N8QWbQJzCUvUH1GAxnPpIMIl/C45UxwCue4 eE9dr4e06rI7c9CDZzcUN1fK+Jsr5buPRTr+c+R2lwB3fq3K3eH9NVobxNRUc5y/ zdhjl+ltDyAAdusEOGfC6NgZ0i1LRYbRoZD9kvEZy0qZxoIeO0s7NhKI0eEJhJkJ HWiWiZr6XfagKvFsET1ZWtJOBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4JMx2j x7CI2u9O/w6AO+Ah+6hVMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxVmY+JQYmTvx87Oi30UQsFbtU2D+40l6JhrexZ0pc8V9FA+U9cFdV /TasP3+FA9ol2YYF8b0yiVt1VFBi52Ik1iJx08ktMlzrsGB1QIrWRR06pnb/Yi3v jchjSCzr3ZCDIirkSowE+iHdUXp8hDYi4VnhqPYMP0FD7fVXBAgJW3cIk+kw5VHe 5Ot6Llkz8mjdOCmuWlsxIwNBxPQet6tSOCWDO4kkar/gNVWGQ+mdCwt8lrHcfJ5T hZqdMXEgScrkpCsMbS6jiL/SbCUfD6864CR5i/KOG/O7vPuVrflsNTA02ZRpUuD4 MN8UFh8ZFKQeHlP83xQEGpp04JKnhm1K -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:27 2025 by rpki-client